You are viewing a plain text version of this content. The canonical link for it is here.

Posted to issues@sentry.apache.org by "Arjun Mishra (JIRA)" <ji...@apache.org> on 2018/04/13 14:48:00 UTC

[jira] [Updated] (SENTRY-2202) Revoking SELECT or INSERT from parent privilege does not get applied in Impala

     [ https://issues.apache.org/jira/browse/SENTRY-2202?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Arjun Mishra updated SENTRY-2202:
---------------------------------
    Description: When revoking select or insert from privilege should be applied to chid priv. For eg if there is ALL on table and SELECT on database and SELECT is revoked from database, then table privileges should be changed to INSERT. This is not happening in Impala because when looking for child privilege we only filter by "/*" as opposed to both "/*" or "all" depending on the original privilege  (was: When revoking select or insert from privilege should be applied to chid priv. For eg if there is ALL on table and SELECT on database and SELECT is revoked from database, then table privileges should be changed to INSERT. This is not happening in Impala because when looking for child privilege we only filter by "*" as opposed to both "*" or "all" depending on the original privilege)

> Revoking SELECT or INSERT from parent privilege does not get applied in Impala
> ------------------------------------------------------------------------------
>
>                 Key: SENTRY-2202
>                 URL: https://issues.apache.org/jira/browse/SENTRY-2202
>             Project: Sentry
>          Issue Type: Bug
>          Components: Sentry
>    Affects Versions: 2.1.0
>            Reporter: Arjun Mishra
>            Assignee: Arjun Mishra
>            Priority: Major
>             Fix For: 2.1.0
>
>
> When revoking select or insert from privilege should be applied to chid priv. For eg if there is ALL on table and SELECT on database and SELECT is revoked from database, then table privileges should be changed to INSERT. This is not happening in Impala because when looking for child privilege we only filter by "/*" as opposed to both "/*" or "all" depending on the original privilege



--
This message was sent by Atlassian JIRA
(v7.6.3#76005)